Benlog

security, privacy, transparency.

Archive for the 'privacy' Category

The Health IT report is very good; some opinionated suggestions

Posted: Wednesday, December 8th, 2010 @ 3:24 pm in data, health, privacy | 2 Comments »

“Oy,” I thought, when I received a copy of “REPORT TO THE PRESIDENT REALIZING THE FULL POTENTIAL OF HEALTH INFORMATION TECHNOLOGY TO IMPROVE HEALTHCARE FOR AMERICANS: THE PATH FORWARD” [PDF]. I worried this would be a lot of vague, easy-to-agree-with advice with little actionable material. I was wrong. Hats off to the team that wrote [...]

airport privacy

Posted: Monday, November 15th, 2010 @ 12:18 am in privacy | 1 Comment »

Today, I opted out of the TSA’s “advanced imaging” system at San Francisco International airport. To the TSA’s credit, they behaved very professionally. As soon as I said I was opting out, a manager came over and asked me why, wrote down my reason, and very politely directed me to a patdown. The TSA agent [...]

Facebook can and should do more to proactively protect users

Posted: Friday, October 22nd, 2010 @ 1:14 am in crypto, privacy, web | 2 Comments »

A few days ago, the Wall Street Journal revealed that Facebook apps were leaking user information to ad networks. Today, Facebook proposed a scheme to address this issue. This is good news, but I’m concerned that Facebook’s proposal doesn’t address the underlying issue fully. Facebook could be doing a lot more to protect its users, [...]

browser extensions = user freedom

Posted: Saturday, June 5th, 2010 @ 8:29 pm in autonomy, privacy, web | 1 Comment »

The web browser has become the universal trusted client. That can be good: users can mostly rely on their browsers to isolate their banking site from the other web sites they visit. It can also be bad for users’ freedom: Facebook can encourage the world to add “Like” buttons everywhere, and suddenly users are being [...]

devices, payload data, and why Kim is (in part) right.

Posted: Tuesday, June 1st, 2010 @ 8:19 pm in data, policy, privacy | 5 Comments »

A few days ago, I wrote about privacy advocacy theater and lamented how some folks, including EPIC and Kim Cameron, are attacking Google in a needlessly harsh way for what was an accidental collection of data. Kim Cameron responded, and he is right to point out that my argument, in the Google case, missed an [...]

Privacy Advocacy Theater

Posted: Thursday, May 27th, 2010 @ 1:58 pm in policy, privacy | 8 Comments »

Ed Felten recently used the very nice term Privacy Theater in describing the insanity of 6,000-word privacy agreements that we pretend to understand. The term, inspired by Bruce Schneier’s “security theater” description of US airport security, may have been introduced by Rohit Khare in December 2009 on TechCrunch, where he described how “social networks only [...]

For deniability, faking data even the owner can’t prove is fake

Posted: Friday, February 26th, 2010 @ 5:29 pm in crypto, privacy, voting | No Comments »

I was speaking with a colleague yesterday about Loopt, the location-based social network, the rise of location-based services and the incredible privacy challenges they present. I heard the Loopt folks give a talk a few months ago, and I was generally impressed with the measures they’re taking to protect their users’ data. I particularly enjoyed [...]

Buzz Kill

Posted: Saturday, February 13th, 2010 @ 9:20 pm in policy, privacy | No Comments »

Everyone is talking about the privacy disaster that was the Google Buzz launch, and oh my goodness it was. I’ve never been so thankful that I don’t use gmail. I’m frankly surprised that they didn’t do a smaller beta first, or that there isn’t a group at Google charged with thinking about the privacy implications [...]

One real issue behind the Mint.com sale to Intuit: who owns the data?

Posted: Saturday, September 19th, 2009 @ 2:40 pm in privacy | No Comments »

A few days ago, mint.com, a fantastic online personal finance tool, was sold to Intuit. A number of users are disappointed, and some are downright pissed, claiming the “next generation bends over.” Well, first of all, that’s ridiculous, a company sells when it wants to sell, and there are may ways to change the world, [...]

A Partial Report from Social Network Security 2009 @ Stanford

Posted: Sunday, September 13th, 2009 @ 6:30 pm in privacy, security, web | 2 Comments »

On Friday, I attended Social Network Security 2009 at Stanford. This was a fantastic get-together, with some very interesting info from Facebook, Google, Yahoo, Loopt, and the research front. I have some notes, mostly from the first half of the day, at which point my laptop battery ran out. Time to upgrade to the 7-hour [...]